This is what a paid StackPatrol report delivers.
A real 20-page, consent-aware scan of www.dagbladet.no showing the vendor map, region breakdown, cookies, third-party hosts, the hosting/email/DNS infrastructure jurisdiction, Data Privacy Framework status, the consent-aware delta and per-vendor “found on” evidence. The free scan covers up to 2 pages and omits the paid-only sections; a paid report on your own site will look exactly like this, with your data.
This site is itself owned by a EU-based company, so most requests it makes are first-party. The third-party stack below, and the EU Independence Score, describe ownership of the site, not which embedded vendors it uses.
This page contacts 46 third-party hostnames belonging to 31 vendors we recognise plus 6 unmatched domains. Of those vendors, 14 are US-owned, 14 Europe-based and 3 other / global. It also sets 20 cookies during the scan.
An experimental signal computed from detected third parties. 14 US-owned vendors detected. Score reflects jurisdiction risk weighted by what each vendor does. Not a compliance rating. Non-EU-owned hosting, email or DNS infrastructure was also factored in.
- Baseline+100
- Vendor risk, jurisdiction × category (14 groups)Alphabet (4 services), Magnite (Rubicon Project), PubMatic, Xandr / AppNexus, … — capped at −60-60
- Non-EU vendor ratio (55% of classified)17 of 31 classified vendors are significantly non-EU owned.-11
- Unmatched third-party domains (6)-24
- Non-EU infrastructurehosting (Cloudflare); email (Microsoft 365); DNS (Cloudflare)-17
- Total0
Infrastructure & jurisdiction
Digital sovereignty is about where data lives and flows, not just which trackers fire. This is who hosts the site, who handles its email, and who answers its DNS — classified by the owning company’s jurisdiction.
- HostingCloudflareUS-owned
Served via Cloudflare (United States). Even if the servers physically sit in Europe, Cloudflare is subject to its home-country law — for US providers, the CLOUD Act and FISA 702 mean authorities can in principle compel access to data it processes.
cf-ray - Email (MX)Microsoft 365US-owned
Email for this domain is handled by Microsoft 365 (United States). Every inbound message — and any personal data inside it — is processed by a provider subject to non-EU law.
dagbladet-no.mail.protection.outlook.com - DNS (NS)CloudflareUS-owned
Authoritative DNS is operated by Cloudflare (United States). DNS queries reveal which pages visitors request, and are processed under non-EU law.
lisa.ns.cloudflare.com
Provider detection is best-effort, based on response headers and public MX/NS records. Absence of a provider here does not prove a European alternative is in use.
Consent banner detected, but we couldn’t accept it automatically
We saw a consent dialog on the entry page but the “Accept all” control didn’t match any selector in our library. The vendor list below reflects the no-interaction state only. Send the URL to support and we’ll add a matcher for this CMP.
Detected vendors
31 vendors across 11 categories · highest-risk first
Vendor Region Detected on EU alternatives Google Publisher Tag United StatesVisit vendor siteUS-ownedDPF-certifiedsecurepubads.g.doubleclick.netMagnite (Rubicon Project) United StatesCommon in publisher header-bidding stacks.Visit vendor siteUS-ownedmicro.rubiconproject.comprebid-server.rubiconproject.comAdformImprove DigitalPubMatic United StatesVisit vendor siteUS-ownedhbopenbid.pubmatic.comAdformImprove DigitalXandr / AppNexus United StatesVisit vendor siteUS-ownedib.adnxs-simple.comIndex Exchange (Casale Media) CanadaCanada-based; has an EU adequacy decision.Visit vendor siteUnknownhtlb.casalemedia.comAdformImprove DigitalSmartyAds Ukraine / United StatesHeadquartered in Ukraine with US offices.Visit vendor siteUnknownbid.essrtb.comAdformImprove DigitalAdform DenmarkVisit vendor siteEUadx.adform.net- Adnuntius NorwayVisit vendor siteEUeurope.delivery.adnuntius.com- Improve Digital (360yield) NetherlandsVisit vendor siteEUad.360yield-basic.com- Medialaben NorwayVisit vendor siteEUam.medialaben.nopublic-scripts.prod.medialaben.no- Readpeak FinlandVisit vendor siteEUapp.readpeak.com- EUadx.adform.netEUeurope.delivery.adnuntius.comUS-ownedDPF-certifiedsecurepubads.g.doubleclick.netEUad.360yield-basic.comUS-ownedmicro.rubiconproject.comprebid-server.rubiconproject.comEU alternativesAdformImprove DigitalEUam.medialaben.nopublic-scripts.prod.medialaben.noEUapp.readpeak.comVendor Region Detected on EU alternatives AWS CloudFront United StatesVisit vendor siteUS-ownedDPF-certifiedd3gzcxeajjz4zb.cloudfront.netCloudflare United StatesIncludes Cloudflare Web Analytics and Turnstile.Visit vendor siteUS-ownedDPF-certifiedcdnjs.cloudflare.comGoogle APIs / GStatic United StatesCatch-all for googleapis.com and gstatic.com requests not already attributed to a more specific Google product.Visit vendor siteUS-ownedDPF-certifiedimasdk.googleapis.comjsDelivr Global (open source)Multi-CDN; routes through several providers.Visit vendor siteGlobalcdn.jsdelivr.netSelf-hostedBunny.netAller Media Denmark / NordicsOften appears as a third-party CDN for Aller-owned titles.Visit vendor siteEUcdn.video.aller.com- Bunny.net SloveniaVisit vendor siteEUsportsdata-icons.b-cdn.netsportsdata-nifs-images.b-cdn.net- Dagbladet static (dbstatic.no) NorwayVisit vendor siteEUgraphics.dbstatic.nomedia.dbstatic.no- EUcdn.video.aller.comUS-ownedDPF-certifiedd3gzcxeajjz4zb.cloudfront.netEU alternativesEUsportsdata-icons.b-cdn.netsportsdata-nifs-images.b-cdn.netUS-ownedDPF-certifiedcdnjs.cloudflare.comEU alternativesgraphics.dbstatic.nomedia.dbstatic.noUS-ownedDPF-certifiedimasdk.googleapis.comEU alternativesVendor Region Detected on EU alternatives Google Analytics United StatesOften loaded together with Google Tag Manager.Visit vendor siteUS-ownedDPF-certifiedwww.googletagmanager.comEchobox United KingdomVisit vendor siteEUapplets.ebxcdn.com- Kilkaya NorwayVisit vendor siteEUcl-eu2.k5a.io- Medietall NorwayVisit vendor siteEUlog.medietall.no- EUapplets.ebxcdn.comUS-ownedDPF-certifiedwww.googletagmanager.comEU alternativesEUcl-eu2.k5a.ioEUlog.medietall.no
Cookies detected (20)
Cookies set during the scan. Third-party cookies are set by domains other than the one you scanned and may require explicit consent under GDPR/ePrivacy.
medialaben.noThird-party · 1__cf_bmdagbladet.appThird-party · 1__cf_bmdbstatic.noThird-party · 1__cf_bmwidget-mediator.zopim.comThird-party · 1AWSALBCORSdagbladet.noFirst-party · 12abTestCookie__cf_bm_sp_suallerM_seg2blaize_sessionblaize_tracking_idxavier-id_ga_0GXRCV5QGT_ga__zlcmid__mbl_k5awww.dagbladet.noFirst-party · 2AWSALBAWSALBCORSkundeservice.dagbladet.noFirst-party · 2_cfuvid__cf_bmUnmatched third-party domains
These domains were detected but not yet matched to a known vendor in our database.
ekom.norsktippingpartner.noeu-img-cdn.livecenter.comlivecenter.norkon.netlivecentercdn.norkon.netstatic.dagbladet.appwww.e-pages.dkRecommendations
- Review AWS CloudFront if you want a European alternative. Options include Bunny.net, Scaleway Edge, OVHcloud CDN.
- Review Cloudflare if you want a European alternative. Options include Bunny.net, Fastly (US), KeyCDN (Switzerland).
- Review Google Analytics if you want a European alternative. Options include Plausible, Matomo, Simple Analytics.
- Review Google APIs / GStatic if you want a European alternative. Options include Bunny CDN, jsDelivr, cdnjs (Cloudflare).
- Review Google Fonts if you want a European alternative. Options include Bunny Fonts (bunny.net), Self-hosted fonts, Fontshare.
- Review Google Publisher Tag if you want a European alternative. Options include Adnuntius, Adform.
- Review i18nexus if you want a European alternative. Options include Lokalise (LV), Crowdin (EE/UA).
- Review JW Player if you want a European alternative. Options include Bunny Stream, Vimeo OTT (US).
A note on this report
StackPatrol is the technical map your DPO needs before the legal review. It surfaces the third-party services your site loads and where those vendors are based, so the legal analysis starts from facts, not guesswork.
What we provide is a technical signal: ownership region, observed network requests, vendor metadata. Legal applicability — whether a specific vendor or data flow is lawful for your use case — depends on your contracts, DPAs, sub-processors, data categories, and legal basis. We don’t give legal advice.
Vendor database verified June 2026.
Run this on your own site.
Free, no login required, results in under a minute. Paid plans add consent-aware scanning, deeper crawls and PDF reports.